StackRadar

CVE-2024-47081

Medium

Advisory

Published 9 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
701
of 17,787 indexed, latest versions
Container images
757
deployed by those charts
Fix available
5 of 5
affected packages

Requests vulnerable to .netrc credentials leak via malicious URLs

Carried by container images the latest versions of 701 of 17,787 indexed charts deploy, on 757 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+25 more2.32.4745
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+6 more2.2.1-1ubuntu0.4+esm1, 2.9.1-3ubuntu0.1+esm2, 2.18.4-2ubuntu0.1+esm2, 2.22.0-2ubuntu1.1+esm1+1 more62
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+2 more0:2.20.0-6.el8_10, 0:2.25.1-10.el9_643
python-pipdeb22.0.2+dfsg-1, 22.0.2+dfsg-1ubuntu0.2, 22.0.2+dfsg-1ubuntu0.3, 22.0.2+dfsg-1ubuntu0.4+5 more22.0.2+dfsg-1ubuntu0.7, 24.0+dfsg-1ubuntu1.321
py3-requestsapk2.32.3-r02.32.4-r03
OSV records
ALPINE-CVE-2024-47081DEBIAN-CVE-2024-47081GHSA-9hjg-9r4m-mvj7RHSA-2025:12519RHSA-2025:13234UBUNTU-CVE-2024-47081
Also known as
PYSEC-2026-1872, RHSA-2025:15121, RHSA-2025:15122, RHSA-2025:15691, USN-7568-1, USN-7762-1

Charts affected

701 by stars
ChartLatestAffected imagesRadar Score
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47081.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
requests@2.32.3
2.32.4

Open the chart page →

569

Container images carrying it

757 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
requests@2.27.1
2.32.4
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
requests@2.32.3
2.32.4
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
requests@2.31.0
2.32.4
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
requests@2.28.2
2.32.4
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
requests@2.32.3
2.32.4
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
requests@2.22.0-2ubuntu1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
requests@2.32.3
2.32.4
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
requests@2.32.3
2.32.4
1
ghcr.io/cfi2017/opencve-web:3.0.06961eab190a2
requests@2.32.3
2.32.4
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
requests@2.28.1
2.32.4
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
requests@2.32.3
2.32.4
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
requests@2.31.0
2.32.4
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
python-requests@2.20.0-2.1.el8_1
requests@2.20.0
0:2.20.0-6.el8_10
2.32.4
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
python-requests@2.20.0-2.1.el8_1
requests@2.20.0
0:2.20.0-6.el8_10
2.32.4
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
python-requests@2.20.0-2.1.el8_1
requests@2.20.0
0:2.20.0-6.el8_10
2.32.4
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
python-requests@2.20.0-2.1.el8_1
requests@2.20.0
0:2.20.0-6.el8_10
2.32.4
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
python-requests@2.20.0-2.1.el8_1
requests@2.20.0
0:2.20.0-6.el8_10
2.32.4
1
ghcr.io/cunningpike/fediblockhole:0.4.22abc5f0350dc
requests@2.28.2
2.32.4
1
ghcr.io/dask/dask:2024.1.0080150de7d86
requests@2.31.0
2.32.4
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
requests@2.31.0
2.32.4
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
requests@2.31.0
2.32.4
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
requests@2.26.0
2.32.4
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
python-pip@24.0+dfsg-1ubuntu1.1
requests@2.32.3
24.0+dfsg-1ubuntu1.3
2.32.4
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
requests@2.26.0
2.32.4
1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
requests@2.32.3
2.32.4
1
ghcr.io/dynamia-ai/hami-enterprise:v2.10.0-r0-openshift.c4e22e88745504757300
requests@2.20.0
2.32.4
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
requests@2.32.2
2.32.4
1
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
requests@2.32.3
2.32.4
1
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
requests@2.31.0
2.32.4
1
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
requests@2.31.0
2.32.4
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
requests@2.32.3
2.32.4
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
requests@2.22.0
2.32.4
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
requests@2.22.0-2ubuntu1
requests@2.22.0
2.22.0-2ubuntu1.1+esm1
2.32.4
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
requests@2.32.3
2.32.4
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
requests@2.32.3
2.32.4
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
requests@2.27.1
2.32.4
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
requests@2.31.0
2.32.4
1
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
requests@2.32.3
2.32.4
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
requests@2.32.3
2.32.4
1
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
requests@2.32.2
2.32.4
1
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
requests@2.31.0
2.32.4
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
requests@2.32.3
2.32.4
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
python-requests@2.25.1-7.el9_2
requests@2.25.1
0:2.25.1-10.el9_6
2.32.4
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
requests@2.28.1
2.32.4
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
requests@2.25.1
2.32.4
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
requests@2.26.0
2.32.4
1
ghcr.io/kubeshop/k8s-sidecar:ignore-initial-events7f583a36a764
requests@2.28.1
2.32.4
1
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
requests@2.32.3
2.32.4
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
requests@2.31.0
2.32.4
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
requests@2.32.3
2.32.4
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.